Equifax faces maximum GDPR fine over data breach

Equifax Hit With Maximum UK Privacy Fine After Mega-Breach

Equifax Hit With Maximum UK Privacy Fine After Mega-Breach

"The UK arm of the company failed to take appropriate steps to ensure its American parent Equifax, which was processing the data on its behalf, was protecting the information".

Credit bureau Equifax has been hit with the maximum possible fine under United Kingdom law for "multiple failures" that contributed to its massive 2017 data breach, including its failure to act on a critical vulnerability alert issued by the U.S. Department of Homeland Security.

The information exposed due to lax security practices included names, dates of birth, addresses, phone numbers, driver's license details, Social Security numbers, and credit card data.

'The loss of personal information, particularly where there is the potential for financial fraud, is not only upsetting to customers, it undermines consumer trust in digital commerce, ' explains Information Commissioner Elizabeth Denham of the ruling.

The ICO, which teamed up with the Financial Conduct Authority to investigate the cyber attack, said the company did not take the appropriate steps to fix the vulnerability.

The fine was deemed to be "reasonable and proportionate" under the Data Protection Act, according to the circumstances detailed in a 32-page statement accompanying the decision.

Equifax faces maximum GDPR fine over data breach

The Information Commissioner's Office (ICO) has issued the maximum fine possible to Equifax in response to failings which led to a major 2017 breach.

The UK's Information Commissioner's Office (ICO) has imposed the fine following an investigation into the breach. The ICO also said there was also a "lack of legal basis for [the] global transfers of United Kingdom citizens' data". Their boards need to ensure that internal controls and systems work effectively to meet legal requirements and customers' expectations.

The Atlanta-based company has been subject to probes around the world since disclosing a year ago that a hack had exposed the data in one of the biggest cyber attacks in history.

So while the attention today will no doubt be on the ICO's fine, which is a significant landmark, the real question for me is around accountability.

The timing of the breach and the ICO investigation, however, have saved the company a significantly larger penalty: The investigation was carried out under the terms of the Data Protection Act 1998, which allows for a maximum £500,000 fine regardless of the size of the company involved; since May this year, the Europe-wide General Data Protection Regulations (GDPR) increase the maximum possible penalty to the greater of £17.8 million or four percent of the company's turnover.

An Equifax spokesperson said: "Equifax has cooperated fully with the ICO throughout its investigation, and we are disappointed in the findings and the penalty". Once it did so, the SSL decryption tool helped flag attackers' data exfiltration, using encrypted data, and led back to the Apache Struts 2 implementation, the GAO's report said. "We apologise again to any consumers who were put at risk". The breach slashed a third off the company's share price in one week after hackers accessed the sensitive personal information by exploiting a previously identified software vulnerability between May and July 2017.

Kavanaugh's accuser makes more demands for testimony agreement
Her office released an audio recording to Politico in which she said: "I was appalled by the president's tweet ". He seems open to pushing back Monday's hearing date, as Ford's lawyers say she's busy coping with death threats.

Recommended News

  • Industrials propel Dow to another new high

    Industrials propel Dow to another new high

    Telecoms rose 1.4 percent on its last trading day as a discrete major S&P sector, and was the index's biggest percentage gainer. Advancing issues outnumbered declining ones on the NYSE by a 2.17-to-1 ratio; on Nasdaq, a 2.77-to-1 ratio favored advancers.
    Will you be watching the new Doctor Who?

    Will you be watching the new Doctor Who?

    This Doctor may be new , but Whittaker's take on the character is still as empathetic and resourceful as we know the Doctor to be. Like a TARDIS after a fiery regeneration sequence, a new age of Doctor Who is crashing down towards us at a breakneck pace.
    Bill Belichick actually discusses Josh Gordon on Friday

    Bill Belichick actually discusses Josh Gordon on Friday

    Now you could limit the number of plays and try to do that, and I think we've done that plenty of times. Still, King feels Gordon is not the type of player a franchise like the Patriots should employ.
  • Isha Ambani-Anand Parimal to exchange rings tonight: Details here

    Isha Ambani-Anand Parimal to exchange rings tonight: Details here

    The place is also home to many Hollywood A-listers including George Clooney, Julia Roberts and Catherine Zeta Jones. Priyanka and Nick were decked up in Manish Malhotra couture dresses for the celebrations.
    Jürgen Klopp wants Liverpool to become ‘ugliest team’ to play against

    Jürgen Klopp wants Liverpool to become ‘ugliest team’ to play against

    He is in a good shape, actually, and then finishing is never something you can take for granted. It is completely normal everyone expects that". "We don't expect that".
    Just one in 10 will be a smoker

    Just one in 10 will be a smoker

    It said that every year around 400,000 smokers quit successfully in England - the equivalent of around one every 80 seconds. I'm now on the lowest nicotine strength and will then come off the e-cigarette altogether when the time is right for me.
  • An intensifying battle over Supreme Court nominee Brett Kavanaugh

    An intensifying battle over Supreme Court nominee Brett Kavanaugh

    She and her team are determined to sink Kavanaugh or at least delay the proceedings for as long as possible. -Monday is too soon. Without an investigation, no one knows what really happened that night, but parts of America may have already have decided.
    USA  ‘very, very close’ to Mexico-only NAFTA deal: White House

    USA ‘very, very close’ to Mexico-only NAFTA deal: White House

    Freeland and Lighthizer are due in NY next week for the United Nations General Assembly, but it was unclear if they would meet. Canada, a close military ally and the top buyer of US goods, has said the national security justification is "absurd".
    Huge  1,000ft spider web mysteriously appears overnight in Greece

    Huge 1,000ft spider web mysteriously appears overnight in Greece

    They are not a threat because they are not poisonous and are, in fact, helpful for local communities because they eat mosquitos. Though it is huge, local reports indicate the web appeared essentially overnight, with locals awaking to a horrifying surprise.
  • Eric Schmidt: Internet Could Split in 2 by 2028

    Eric Schmidt: Internet Could Split in 2 by 2028

    He said that rather than splintering, we could see a China-led internet and the current USA -led internet. The Belt and Road Initiative (BRI) is a development strategy adopted by the Chinese government.
    Kenyan 'Rafiki' film ban lifted for a week

    Kenyan 'Rafiki' film ban lifted for a week

    After the ruling Mr Mutua said that it would be a tragedy and a shame to have homosexual films define the Kenyan culture. In the film, directed, written and co-produced by Ms Kahiu, the girls are separated by their communities.
    Yankees Set Record For Most Players With 10 HRs

    Yankees Set Record For Most Players With 10 HRs

    He alerted the conductor but at that point, Vigean had already climbed on top of the train. The train was stopped between Larchmont and Mamoroneck stations due to a power issue.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.